Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa
File:                     3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          6k3KfUgMebFRM4pC7r1QhCv5uspLzr3pEAjgiqAAQyA=
Subject key identifier:   AD:FC:8D:A0:0A:9E:FB:AE:31:CF:23:E4:1D:2C:53:90:5E:75:DC:60
Certificate issuer:       /CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
Certificate serial:       473D72FBE4EC11D53E513E158D698B0145D820A1
Authority key identifier: 05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa
Signing time:             Mon 11 May 2026 16:34:10 +0000
ROA not before:           Mon 11 May 2026 16:29:10 +0000
ROA not after:            Mon 10 May 2027 16:34:10 +0000
asID:                     20473
IP address blocks:        103.123.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl
                          rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/1/DA632505767413A1409A3E33B99D256CDFB1901D.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2mMlBXZ0E6FAmj4zuZ0lbN-xkB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:3d:72:fb:e4:ec:11:d5:3e:51:3e:15:8d:69:8b:01:45:d8:20:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059E0652FCBAC895061A57FE0566CF353F3E43CA
        Validity
            Not Before: May 11 16:29:10 2026 GMT
            Not After : May 10 16:34:10 2027 GMT
        Subject: CN=ADFC8DA00A9EFBAE31CF23E41D2C53905E75DC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fd:47:a1:31:b9:bc:be:cf:ac:2d:fb:c2:16:
                    d3:2a:2f:94:e0:f6:5f:35:6d:c5:4c:33:29:38:58:
                    78:e9:c7:ce:a5:09:3a:52:10:2a:c9:16:b9:03:e9:
                    ee:11:b5:30:ed:08:48:b9:bd:ea:11:b6:92:d0:f0:
                    69:cb:f2:bc:c0:05:d8:73:a0:9f:d0:c3:25:66:bd:
                    9d:e3:72:00:4b:e1:ef:67:0a:3e:3b:6d:99:07:04:
                    f8:8b:71:cc:5a:f9:d7:9d:7f:b6:99:c1:21:ed:c1:
                    ad:9a:a5:f2:a8:ad:f3:f5:ff:48:73:55:f1:90:54:
                    fd:fd:ba:74:94:0d:f4:20:97:6f:9c:af:22:95:94:
                    51:54:55:31:dc:41:42:5b:21:f9:39:54:ee:07:55:
                    19:fc:df:3a:c2:f2:c1:8b:86:cb:0c:73:67:8e:50:
                    d0:52:5b:32:89:07:e1:df:f1:87:38:c0:bf:9b:34:
                    16:d3:24:53:d3:62:17:7d:85:08:38:02:3f:e5:93:
                    21:f9:23:0d:a4:ee:02:ab:b5:58:f7:e0:a0:19:97:
                    73:51:af:9a:ac:7f:32:dc:7d:5e:0e:21:72:7e:88:
                    d6:58:ae:89:c7:65:76:d4:c8:96:1f:a8:40:8b:b0:
                    b2:e4:1b:13:62:e0:3b:1f:97:73:5e:56:1d:b4:2a:
                    08:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:8D:A0:0A:9E:FB:AE:31:CF:23:E4:1D:2C:53:90:5E:75:DC:60
            X509v3 Authority Key Identifier:
                keyid:05:9E:06:52:FC:BA:C8:95:06:1A:57:FE:05:66:CF:35:3F:3E:43:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/059E0652FCBAC895061A57FE0566CF353F3E43CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/1/059E0652FCBAC895061A57FE0566CF353F3E43CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/DENPAIO/0/3130332e3132332e3132382e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:05:c4:00:21:c3:0b:ee:9f:8e:8c:b8:2f:e9:2f:8a:15:ba:
         c8:55:fd:08:39:18:b8:4d:dc:ed:5c:f2:a1:d1:61:27:98:02:
         04:00:8f:ad:12:e1:7d:ef:56:19:33:f5:5c:80:fd:3e:e0:fa:
         28:ce:8f:47:ba:c8:14:97:65:1b:96:c5:0a:c3:b5:d8:04:be:
         b7:f7:65:11:78:71:7a:b8:bc:9d:80:79:62:2e:dd:26:62:bb:
         cd:42:35:25:d6:80:ec:0e:0e:b3:28:2c:ca:71:a2:45:37:a1:
         d1:23:b3:0d:e9:43:7e:2b:6a:78:9a:6b:82:34:66:4f:c7:9a:
         10:57:8a:4d:82:01:5e:3c:ad:78:04:47:55:da:f3:f3:8e:18:
         0d:1b:a5:d3:32:ba:b3:0e:1f:a8:6e:b3:75:99:2d:f6:6c:15:
         30:a5:80:4c:c3:79:f9:4e:7f:9d:73:57:2b:ac:d4:b0:c0:39:
         8d:db:77:c7:55:ee:e8:80:8f:93:e2:82:fd:7d:72:b6:dd:a9:
         82:3d:2c:1a:f8:25:67:c4:ea:07:56:ba:e2:d2:4e:9e:ff:9f:
         f4:48:f0:05:08:26:00:18:83:b3:b0:e3:6d:9b:7b:e8:a0:5e:
         a5:83:f4:f3:c0:e9:7b:86:3c:30:1b:1b:63:92:e5:0e:22:cf:
         44:10:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:11:25 2026 by rpki-client